Configures Dynamic Threat Intelligence (DTI) network (also referred to as MPC) settings for updating and downloading Guest Images and for notifications. Guest Images are guest operating systems and related applications used by the Multivector Virtual Execution (MVX) engine, formerly referred to as the VXE, to analyze suspicious traffic and malware. FireEye provides software updates to Guest Images on a periodic basis.
By default, automatic checking for updates and downloading of Guest Images is enabled on the Central Management System appliance running release 6.3.0 or later and on MPS appliances running 6.3.0 or later. For automatic updates and downloads to occur, automatic checking and downloading of Guest Images must be enabled on the Central Management System appliance and its connected appliances. Email notification is not enabled by default.
Note
A Central Management System appliance must host a complete and valid set of Guest Images before any connected MPS systems attempt to download Guest Images from the Central Management System appliance. This is true for both manually-initiated operations as well as any automatic operations. If an automatic download to a connected MPS fails because the Central Management System appliance has not finished downloading a valid set of Guest Images, the automated download will retry automatically at scheduled times.
By default, the check is once every day but you can configure the update schedule using the fenet guest-images check-update schedule command. For manual downloads that fail on connected MPS appliances for the same reason, retry the download after verifying that downloads on the Central Management System appliance are complete.
Important
These commands were removed from the Central Management System appliance in Release 7.5.0. For information about downloading guest images to the Central Management System appliance to update managed appliances, see the Central Management System Administration Guide and the fenet dti cache populate guest-images command. (The fenet guest-images commands are still available on the Central Management System appliance when it is not connected to the DTI network and instead uses the DTI Offline Portal to obtain guest images.)
Syntax
fenetguest-images {auto {download | notify | update}}
fenet guest-images check-update schedule {daily athour:minute | weekly everyday-of-week | monthly onmonth-dayathour:minute}
fenet guest-images notify email
no fenet guest-images auto
no fenet guest-images notify email
Parameters
auto
The default behavior is to perform automatic checks for updates and perform an automatic download of new Guest Images.
To modify the default settings and to enable notification, use:
download—Enables the automatic download of new Guest Images.notify—Enables a notification to be sent when a new Guest Image is available. You must also enter the fenet guest-images notify email command. To turn off notifications, issue the no fenet guest-images auto notify and the no fenet guest-images notify email commands.update—Enables the Central Management System appliance or managed appliance to automatically check for new Guest Images. If other options have been set, update returns the system to the default behavior of automatic updates and downloads.
check-update schedule
Sets the schedule for the Trellix appliance to check for Guest Image updates:
daily athour:minute—Checks for updates daily at the specified time (for example, 6:15 for 6:15 a.m. or 23:00 for 11:00 p.m.).weekly everyday-of-weekathour:minute—Checks for updates weekly (sun, mon, tues, wed, thu, fri, or sat) at the specified time.monthly onmonth-dayathour:minute—Checks for updates monthly on the specified day (1 through 31) at the specified time.
notify email
Enables email notifications for:
Successful and failed installs
Successful and failed downloads
Example
The following example enables automatic updates and email notification. The Trellix appliance checks for Guest Image updates every Friday at 6:00 p.m.
hostname (config) # fenet guest-images auto update hostname (config) # fenet guest-images notify email
hostname (config) # fenet guest-images check-update schedule weekly every fri at 18:00